/////////////////////////////////////////////////////////////////////////////
// Original code from libhdfs3. Copyright (c) 2013 - 2014, Pivotal Inc.
// All rights reserved. Author: Zhanwei Wang
/////////////////////////////////////////////////////////////////////////////
//  Modifications by Kumo Inc.
// Copyright (C) Kumo inc. and its affiliates.
// Author: Jeff.li lijippy@163.com
// All rights reserved.
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Affero General Public License as published
// by the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU Affero General Public License for more details.
//
// You should have received a copy of the GNU Affero General Public License
// along with this program.  If not, see <https://www.gnu.org/licenses/>.
//



#pragma once

#include <gsasl.h>

#include <kmhdfs/client/token.h>
#include <kmhdfs/network/socket.h>
#include <kmhdfs/rpc/rpc_auth.h>
#include <kmhdfs/proto/rpc_header.pb.h>

namespace Hdfs {
    namespace Internal {
#define SWITCH_TO_SIMPLE_AUTH -88

        class SaslClient {
        public:
            SaslClient(const RpcSaslProto_SaslAuth &auth, const Token &token,
                       const std::string &principal);

            ~SaslClient();

            std::string evaluateChallenge(const std::string &chanllege);

            bool isComplete();

        private:
            void initKerberos(const RpcSaslProto_SaslAuth &auth,
                              const std::string &principal);

            void initDigestMd5(const RpcSaslProto_SaslAuth &auth, const Token &token);

        private:
            Gsasl *ctx;
            Gsasl_session *session;
            bool complete;
        };
    }
}
